Business Associate Agreement
Every Caseloadflow account includes a signed BAA. Here's how it works and when you get it.
What a BAA is
Under HIPAA, your practice is a covered entity. Because Caseloadflow handles information about your prospective and current patients on your behalf, we are your business associate. A Business Associate Agreement is the contract defining how we may use and protect that information, what we're responsible for, and what happens if there's a breach.
When you receive it
The agreement is sent and signed before your account is created. You don't have to request it, and it's included on every plan at every price. A copy is emailed to you and stays available in your account.
What it covers
- How we may use and disclose information on your behalf
- The safeguards we're required to maintain
- Our obligations if a breach occurs, and the timelines involved
- Restrictions on our subcontractors, who sign their own agreements
- What happens to your data when your account is terminated
Our own chain
Caseloadflow runs on HIPAA-eligible infrastructure, and we maintain a Business Associate Agreement with our platform provider. Your practice's chain of agreements runs all the way down.
Want to review it before you sign up?
Send us a request and we'll provide the agreement in advance for your compliance officer or counsel.
Request the BAA